Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3478518e-fb7f-37e1-a065-e2685585fcd7.roa
File:                     3478518e-fb7f-37e1-a065-e2685585fcd7.roa (raw, json)
Hash identifier:          Af6ncmN7D/Z6BgDzOcVnZh7dcJD35FhZgbwfdsDM5HQ=
Subject key identifier:   19:09:2C:EA:AF:54:07:A9:8C:10:F2:DC:CE:1F:C7:42:B5:DC:B2:31
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196E84C4F5B7AA97FE4B800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3478518e-fb7f-37e1-a065-e2685585fcd7.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     20362
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:e8:4c:4f:5b:7a:a9:7f:e4:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=30abf43f-ce2a-453c-8b26-91b5bd6c39e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1b:c8:5b:97:8a:2b:21:a4:55:98:1f:f5:05:
                    10:d0:9c:8e:43:a9:ba:ed:d0:dc:58:83:23:38:4a:
                    52:a1:d2:d4:76:c5:b4:3d:05:9e:47:eb:c4:ab:79:
                    8e:28:a5:45:9f:9b:d7:db:66:38:10:a7:58:1a:f0:
                    19:f0:cf:56:3b:2a:c0:7c:dd:75:d2:c6:dc:d5:d1:
                    36:fc:8b:17:52:74:63:d0:07:5b:e0:7e:9a:14:85:
                    24:21:78:12:f1:09:2a:b9:8c:a3:cf:1c:9b:d1:71:
                    16:73:7c:49:f0:0a:80:c3:3b:a7:7c:bd:57:2d:af:
                    7e:f9:a0:d1:b2:41:3b:a9:6b:bc:04:a4:32:1d:65:
                    a4:89:a7:5d:58:29:3a:5f:36:df:73:52:6a:ab:9c:
                    16:55:e1:e7:ac:43:a7:7c:d9:78:21:fd:fe:85:f4:
                    ef:46:e3:91:b0:33:61:69:88:09:7f:67:04:50:1d:
                    ce:5e:03:76:e5:43:d6:e0:49:ac:94:1c:8d:4b:b7:
                    ca:ad:73:ac:a3:b3:3d:f2:2b:5c:f4:d0:46:38:0d:
                    22:70:eb:9e:2a:ae:a0:f2:45:75:30:82:e7:19:90:
                    79:9a:1f:af:d5:14:75:d4:1c:cb:4d:12:15:ac:3b:
                    99:e2:32:0e:67:49:00:bc:98:89:84:d3:16:ed:56:
                    33:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:09:2C:EA:AF:54:07:A9:8C:10:F2:DC:CE:1F:C7:42:B5:DC:B2:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3478518e-fb7f-37e1-a065-e2685585fcd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:b3:16:05:eb:bb:6c:27:34:ae:82:02:e8:6d:41:29:e1:b5:
         f1:8f:38:72:6f:7f:55:9c:ea:5b:27:3e:16:71:4a:ca:16:04:
         c1:9e:50:a0:d4:9f:be:44:87:3d:dd:ee:57:6a:8d:3c:7d:66:
         d5:11:00:5b:63:29:10:db:a4:aa:bb:be:6e:30:0f:20:7e:54:
         d2:88:ff:de:c8:b9:57:90:90:54:0d:72:30:28:32:47:6b:a1:
         94:bf:ee:35:0d:03:5c:62:66:38:45:29:86:a6:d2:23:c6:cd:
         0a:14:06:14:08:59:ab:58:d9:5e:4b:b4:15:00:f6:a1:97:cd:
         e8:d7:58:ef:3a:57:2b:f6:2a:81:84:9b:19:10:85:84:d8:7e:
         2d:4c:f1:a9:90:73:81:42:93:4d:19:9a:56:3e:f0:2e:59:c8:
         5d:b3:e9:29:6b:7b:a2:41:6f:63:0f:34:56:a1:d8:30:3d:3c:
         92:a8:d5:4c:fc:6b:8c:4c:66:59:78:fe:63:39:de:dc:7a:66:
         8e:1f:e3:88:01:b4:b7:5e:25:f3:e3:ac:ec:a1:e1:94:70:a2:
         d8:c5:f0:24:1e:06:c5:ff:51:d8:63:54:ef:d9:40:dd:33:72:
         8e:31:39:44:b8:a8:c9:65:e4:b3:22:6c:aa:d8:6e:8c:7a:f6:
         61:16:ac:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:25:26 2025 by rpki-client